Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/index.html?contextId=routing-upstream-proxy

Upstream proxy

The firewall can send outgoing web requests from your network through an upstream proxy (also known as a parent proxy).

When configuring an upstream proxy with the firewall, you don't need to configure users' browsers to send traffic to the upstream proxy.

You can add a single upstream proxy to the firewall. The firewall forwards all web requests from your network to the upstream proxy. The proxy then sends the requests to the internet.

Note

The DPI engine doesn't support upstream proxy. Select Use web proxy instead of DPI engine in the firewall rule used for your web traffic.

Specify the following settings for an IPv4 or IPv6 upstream proxy:

  1. Select Parent proxy.

  2. Enter one of the following for the upstream proxy server:

    • Domain name: All traffic through the firewall to the upstream port is inspected.
    • IP address: Only traffic sent to the upstream IP address and port is inspected.

    Note

    To prevent traffic from bypassing the firewall's web proxy, the firewall also applies the policy to traffic sent from clients directly to the upstream proxy. We recommend that you enter the upstream proxy's IP address.

  3. Enter the port number of the upstream proxy server.

  4. Enter the username and password if your upstream proxy requires authentication.
  5. Click Apply.